CWE:

	Tytuł	Data	Autor
Med.	QNAP Qcenter Virtual Appliance 1.6.x Information Disclosure / Command Injection	13.07.2018	Core Security Technolo...

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2022-12-02

CVE-2022-46159

Updating...

Discourse is an open-source discussion platform. In version 2.8.13 and prior on the `stable` branch and version 2.9.0.beta14 and prior on the `beta` and `tests-passed` branches, any authenticated user can create an unlisted topic. These topics, which are not readily available to other users, can take up unnecessary site resources. A patch for this issue is available in the `main` branch of Discourse. There are no known workarounds available.

2022-11-23

CVE-2022-45462

Updating...

Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher

2022-11-15

CVE-2022-3480

Updating...

2022-11-09

CVE-2021-34568

Updating...

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.

2022-10-25

CVE-2022-32765

Updating...

An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

2022-10-19

CVE-2022-41617

Updating...

In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface.

2022-10-14

CVE-2022-3439

Updating...

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

2022-10-13

CVE-2022-3456

Updating...

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

2022-10-06

CVE-2022-3273

Updating...

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

2022-09-30

CVE-2022-3371

Updating...

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

 

---

Copyright 2022, cxsecurity.com